VYPR
← All advisories
High severity8.1NVD Advisory· Published Mar 16, 2022· Updated Jun 17, 2026

CVE-2021-41987

CVE-2021-41987

Description

In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution. The attacker must know the scep_server_name value. This affects RouterOS 6.46.8, 6.47.9, and 6.47.10.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Mikrotik/Routeros5 versions
    cpe:2.3:o:mikrotik:routeros:6.46.8:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:mikrotik:routeros:6.46.8:*:*:*:*:*:*:*
    • cpe:2.3:o:mikrotik:routeros:6.47.10:*:*:*:*:*:*:*
    • cpe:2.3:o:mikrotik:routeros:6.47.9:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 6.46.8, 6.47.9, and 6.47.10
  • Mikrotik/SCEP Serverllm-create
    Range: 6.46.8, 6.47.9, and 6.47.10

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.